From 3e8b46ce338ea591f432203f4ee3b003a27329d4 Mon Sep 17 00:00:00 2001
From: Daniel Ankers <dankers@domicilium.com>
Date: Wed, 4 Oct 2023 13:45:27 +0100
Subject: [PATCH] Add FreeIPA server

---
 main.tf | 35 +++++++++++++++++++++++++++++++++++
 vars.tf |  4 ++++
 2 files changed, 39 insertions(+)

diff --git a/main.tf b/main.tf
index 3da4792..a0e77a5 100644
--- a/main.tf
+++ b/main.tf
@@ -300,3 +300,38 @@ alertmanager:
 EOT
   ]
 }
+
+resource "helm_release" "freeipa" {
+  name = "freeipa"
+  namespace = var.freeipa_namespace
+  repository = "https://improwised.github.io/charts/"
+  chart = "freeipa"
+  create_namespace = true
+  values = [
+<<EOT
+hostname: freeipa.${var.domain_suffix}
+args:
+  realm: MD1CLV.IM
+  domain: md1clv.im
+  dspassword: ${var.freeipa_ds_password}
+  adminpassword: ${var.freeipa_admin_password}
+  nohostdns: true
+  nontp: true
+  setupdns: false
+persistence:
+  enabled: true
+  storageclass: ${var.storageclass}
+ingress:
+  enabled: true
+  hostname: freeipa.${var.domain_suffix}
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  tls: true
+  backendProtocol: http
+service:
+  annotations:
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serverstransport: default-tls-selfsigned@kubernetescrd
+EOT
+  ]
+}
diff --git a/vars.tf b/vars.tf
index 3823e1a..981a8b2 100644
--- a/vars.tf
+++ b/vars.tf
@@ -29,3 +29,7 @@ variable "librenms_namespace" {
 variable "prometheus_namespace" {
   default = "prometheus"
 }
+
+variable "freeipa_namespace" {
+  default = "freeipa"
+}